Chroot-BIND8 HOWTO

6. Appendix - Upgrading BIND Later

So, you had BIND 8.2.2_P7 all nicely chrooted and tweaked to your taste... and then you hear this nasty rumour that there's a remotely-exploitable root hole in that version too, and you need to upgrade to 8.2.3 right away. Do you have to go through this whole long process to install this new version?

Nope. In fact, you really just need the section on Compiling BIND and the first two parts of the section on Installing BIND (installing the binaries outside and inside the jail, respectively).

The rest of the HOWTO deals with setting up the jail and other things like that, which shouldn't need to be altered between versions of BIND. You can just dump the new binaries in over top of the old ones, and you're good to go. But don't forget to kill and restart BIND afterwards, or the old, vulnerable version will still be running!